nerdexam
GIAC

GPEN · Question #145

You are using the dsniff tool to intercept communications between two entities and establish credentials with both sides of the connections. These entities do not notice that you were retrieving the i

The correct answer is A. Man-in-the-middle. The dsniff tool is commonly used to perform Man-in-the-Middle (MITM) attacks by transparently intercepting and relaying traffic between two parties who are unaware of the interception.

Exploitation & Post-Exploitation Techniques

Question

You are using the dsniff tool to intercept communications between two entities and establish credentials with both sides of the connections. These entities do not notice that you were retrieving the information between these two. Which of the following attacks are you performing?

Options

  • AMan-in-the-middle
  • BARP poisoning
  • CSession hijacking
  • DDoS

How the community answered

(21 responses)
  • A
    81% (17)
  • B
    5% (1)
  • C
    10% (2)
  • D
    5% (1)

Why each option

The dsniff tool is commonly used to perform Man-in-the-Middle (MITM) attacks by transparently intercepting and relaying traffic between two parties who are unaware of the interception.

AMan-in-the-middleCorrect

A MITM attack occurs when an attacker secretly positions themselves between two communicating parties, establishing separate connections with each side and relaying messages between them. The dsniff suite includes tools like arpspoof and sshmitm that facilitate this by impersonating both endpoints. Because neither party detects the interception, credentials and data can be captured transparently.

BARP poisoning

ARP poisoning is a technique used to redirect traffic to enable a MITM attack, but it is a mechanism rather than the attack type described in the scenario.

CSession hijacking

Session hijacking involves stealing or forging an authenticated session token to take over an existing session, not establishing two-sided connections to relay data between parties.

DDoS

A DoS attack disrupts availability of a service or resource and does not involve intercepting or relaying communications between two entities.

Concept tested: Man-in-the-Middle attack using dsniff

Source: https://owasp.org/www-community/attacks/Manipulator-in-the-middle_attack

Topics

#man-in-the-middle#dsniff#credential interception#network sniffing

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GPEN Practice